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IN THE CLAIMS: 

-CLAIMS 

There is claimed: 

1. (Currently amended) A list signature method comprising-at-teast: 

an organizing phase (10) cons i st i ng including , for a reliable authority-(4), of 
defining parameters for implementing an anonymous electronic signature, including 
a private key and a corresponding public key T ; 

a phase of registering (20, 20') persons in a list of members authorized to 
generate an electronic signature specific to the members of the list, during which 
each person (2) to be registered, calculates (24) a private key (xi) by means of 
parameters provided by the reliable authority and by parameters randomly selected 
by the person to be registered, and the reliable authority delivers (2&) to each 
person to be registered, a certificate ([A i , E i ]) of membership of the list T ; 

a phase of defining a sequence including for the reliable authority, generating 
a serial number to be used in a signing phase : 

a signing phase (3Q)-during which a member of the list generates (3§) and 
issues (3§) a signature specific to the members of the list, this signature being built 
so as to contain proof that the member of the list having issued the signature, has a 
certificate ([A i , Ei]) of membership of the list, and a signature element which is 
common to all the signatures issued by a same member of the list with a same serial 
number and which contains proof that the serial number was used for generating the 
signature : aa4 

a phase of verifying (40) the issued signature, comprising steps (41, 42) for of 
applying a predefined algorithm in order to show proof that the signature was issued 
by a person having a certificate of membership of the list, and verifying using said 
signature element that the serial number was used for generating the signature: 

charact e r i zed i n that i t furth e r compris e s: 

a phaso of defining a soquonc e cons i sting for th o rel i abl e author i ty (1), of 
g e n e rating a s e ria l numb e r (m) to b e us e d i n th e s i gnatur e phas e (30), a signatur e 
(Sig l ist) g e n e rat e d during th e signatur e phas e compr i sing a signatur e el ement (T 4 ) 
which i s common to a l l th e s i gnatur e s issu e d by a sam e memb e r of tho li st with a 
sam e s e r i a l numb e r a nd which contains proof that th e s e ri a l numb e r (m) was us e d 
for g e n e rating tho signatur e , th e v e r i fy i ng phas e ( 4 0) furth e r comprising a phas e for 
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v e r i fy i ng (43) th e proof that th o s e rial number (m) was us e d for g e nerat i ng th o 
signatur e ; 

a phase of revoking a member of the list in order to remove a member from 
the list, during which the reliable authority (4^-removes the member to be removed 
w i thdrawn from the list and updates the parameters for implementing the anonymous 
electronic signature, in order to take into account the removal of the member from 
the list; and 

a phase of updating certificates ([A i , ei ]) of the members of the list in order to 
take into account changes in the composition of the list. 

2. (Currently amended) (amended) The method according to claim 1, wherein 
the organizing phase (4£)-comprises the definition of a common parameter (y) 
depending on the composition of the list, the phase for registering (20, 20') a person 
in the list comprising the definition of a parameter (ui)-specific to the person to be 
registered which is calculated according to the parameter (u)-depending on the 
composition of the list and which is integrated into the certificate ([Ai, o i , ui]) handed 
out to the person, the registering phase (20, 20') comprising a step of updating the 
common parameter (u)-depending on the composition of the list, the phase of 
revoking a member of the list comprising a step of changing the common parameter 
{y)-depending on the composition of the list, in order to take into account the removal 
of the member from the list, and the phase of updating certificates of the members of 
the list including a step for updating the parameter-(wi) specific to each member of 
the list in order to take into account changes in the composition of the list. 

3. (Currently amended) The method according to claim 1 or 2, wherein a 
signature specific to a member of the list and having the certificate [Ai, E i ] comprises 
parameters Ti, T 2 , T 3 , such that: 

Ti = Ajb* (mod n), 
T 2 = g" (mod n), 
T 3 = g ei h a (mod n), 

a) being a number randomly selected during the signing phase (30) and b, g, 
h and n being general parameters for implementing the group signature, such that 
parameters b, g and h cannot be inferred from each other by integer power raising 
modulo n functions, so that the number A h and therefore the identity of the member 
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of the list having the certificate [Aj, ej cannot be inferred from a signature issued by 
the member. 

4. (Currently amended) The method according to any of th e c l aims claim 1 te 
3, wherein the number {m) of the series used for generating a list signature is 
calculated as a function of a date of the beginning of the series. 

5. (Original) The method according to claim 4, wherein the function for 
calculating the number of a series is of the form: 

F(d) = (H(d)) 2 (mod n) 

wherein H is a collision-resistant hash function, d is the date of the beginning 
of the series, and n is a general parameter for implementing the group signature. 

6. (Currently amended) The method according to any of th e c l aim s claim 1 to 
§, wherein a signature issued by a member of the list contains a parameter which is 
calculated according to the serial number and the private key of the signatory 
member. 

7. The method according to claim 6, wherein the parameter T 4 of a signature 
issued by a member of the list and depending on the serial number m and on the 
private key Xj of the signatory member is obtained by the following formula: 

T 4 = m Xi (mod n) 

n being a general parameter for implementing the group signature, and the 
signature comprises proof that the parameter T4 was calculated with the private key 
xi of the member of the list who issued the signature. 

8. (amended) An electronic voting method comprising: 

a phas e of organizing (50) e l e ctions, dur i ng wh i ch an organ i zing authority 
proc ee ds w i th g e nerat i ng param e t e rs roqu i rod for an organizing phase of a poll 
including, for a reliable authority, defining parameters for implementing an 
anonymous electronic signature for being used to sign a ballot said parameter 
including a private key and a corresponding public kev: and assigns of assigning 
keys to scrutineers, allowing them to decrypt and verify ballots poll-; 
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a phase for ass i gn i ng a r i ght of s i gnature to e ach of the voters, of registering 
voters in a list of voters authorized to generate an electronic signature specific to the 
members of the list during which each voter to be registered calculates a private key 
bv means of parameters provided by the reliable authority and bv parameters 
randomly selected by the voter to be registered, and the reliable authority delivers to 
each voter to be registered, a certificate of membership of the list of voter; 

a phase of defining a seguence for the elections including, for the reliable 
authority, generating a serial number to be used in a voting phase; 

a voting phase (§0) during which the voters of the list of voters sign a ballot by 
issuing a signature specific to the members of the list of voters, this signature being 
built so as to contain a proof that the member of the list of voters having issued the 
signature, has a certificate of membership of the list, and a signature element which 
is common to all the signatures issued bv a same member of the list with a same 
serial number and which contains proof that the serial number was used for 
generating the signature; and 

a counting phase (TO) during which the scrutineers verify the ballots and 
calculate the result of the poll according to the contents of the decrypted and valid 
ballots, the verification of a ballot comprising steps of applying a predefined 
algorithm in order to show proof that the signature was issued bv a person having a 
certificate of membership of the list of voters, and verifying using said signature 
element that the serial number was used for generating the signature, characteriz e d 
i n that i t i mplem e nts a li st signatur e m e thod according to any of c l aims 1 to 7, for 
sign i ng th e ba ll ots, each vot e r b ei ng r e g i st e r e d as a memb e r of a li st, and a s e r i a l 
numb e r (m) b ei ng generat e d fortho po l l, in order to detect whether a same voter has 
issued several ballots for the poll or not; 

a phase of revoking a member of the list of voters in order to remove a 
member from the list, during which the reliable authority removes the member to be 
removed from the list of voters and updates the parameters for implementing the 
anonymous electronic signature, in order to take into account the removal of the 
member from the list; and 

a phase of updating certificates of the members of the list of voters in order to 
take into account changes in the composition of the list 
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9. (Currently amended) The voting method according to claim 8, wherein the 
organizing phase {£0} comprises the handing out to each scrutineer of a public key 
and a private key, the ballots (v») are encrypted (§2) by means of a public key {¥) 
obtained by the product of the respective public keys (yi) of all the scrutineers, and 
the corresponding decryption private key (X) is obtained by calculating the sum of 
the respective private keys of all the scrutineers 

10. (Currently amended) The voting method according to claim 9, wherein 
encryption (§2) of the ballot is carried out by means of a probabilistic encryption 
algorithm. 

1 1 . (Currently amended) The voting method according to any of cla i ms claim 
8 to 10 , wherein the ballots issued by the votes are stored in a public database <4), 
in that the result of the verification and counting of each ballot is stored in the 
database in association with the ballot, and in that the private key (X) for decrypting 
the ballots is published. 

12. (New) A server for organizing a list signature comprising means for: 
generating parameters for implementing an anonymous electronic signature, 

specific to members of a list, said parameters including a private key and a 
corresponding public key; 

transmitting each person to be registered in said list parameters to be used 
for calculating a private key by means of parameters randomly selected by the 
person to be registered, and a certificate of membership of the list; 

generating a serial number to be used by the members registered in said list 
for generating an anonymous signature specific to the members of the list, this 
signature being built so as to contain a proof that the member of the list having 
issued the signature, has a certificate of membership of the list, and a signature 
element which is common to all the signatures issued by a same member of the list 
with a same serial number and which contains proof that the serial number was used 
for generating the signature; 

removing a member of the list to be revoked, and updating the parameters for 
implementing the anonymous electronic signature, in order to take into account the 
removal of the revoked member from the list; and 
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updating the certificates of the members of the list each time the composition 
of the list is changed. 

13. (New) A server for organizing an electronic vote comprising means for: 
generating during a poll organization phase parameters for implementing an 

anonymous electronic signature for being used to sign a ballot, said parameter 
including a private key and a corresponding public key; 

generating keys to be assigned to scrutineers, allowing them to decrypt and 
verify signatures of ballots issued by voters for the poll, said signature being specific 
to members of a list of voters; 

transmitting to each person to be registered in the list of voters parameters to 
be used for calculating a private key by means of parameters randomly selected by 
the person to be registered, and a certificate of membership of the list; 

generating a serial number specific to the poll, to be used by the members 
registered in said list of voters for generating an anonymous signature of a ballot 
specific to the members of the list of voters, this signature of a ballot being built so 
as to contain a proof that the member of the list of voters having issued the signature, 
has a certificate of membership of the list of voters, and a signature element which is 
common to all the signatures issued by a same member of the list of voters with a 
same serial number and which contains proof that the serial number was used for 
generating the signature; 

removing a member of the list of voters to be revoked, and updating the 
parameters for implementing the anonymous electronic signature, in order to take 
into account the removal of the revoked member from the list of voters; and 

updating the certificates of the members of the list of voters each time the 
composition of the list for the poll is changed. 

14. (New) A terminal for generating a list signature comprising means for: 
receiving from a reliable authority parameters to be used for calculating a 

private key; 

calculating a private key by means of the received parameters and 
parameters randomly selected; 

receiving from the reliable authority a certificate of membership of the list; 
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receiving a serial number to be used for generating an anonymous signature 
specific to the members of the list; 

generating an anonymous signature specific to the members of the list, this 
signature being built so as to contain a proof that the member of the list having 
issued the signature, has a certificate of membership of the list, and a signature 
element which is common to all the signatures issued by a same member of the list 
with a same serial number and which contains proof that the serial number was used 
for generating the signature; 

verifying a signature issued by a member of said list by applying a predefined 
algorithm in order to show proof that the signature was issued by a person having a 
certificate of membership of the list, and by verifying using said signature element 
that the serial number was used for generating the signature; and 

receiving a new certificate of membership of the list each time the 
composition of the list is changed. 

15. (New) A terminal for issuing an electronic signature of a ballot during an 
electronic vote, comprising means for: 

receiving from a reliable authority parameters to be used for calculating a 
private key; 

calculating a private key by means of the received parameters and 
parameters randomly selected; 

receiving from the reliable authority a certificate of membership of a list of 

voters; 

receiving a serial number to be used for generating an anonymous signature 
of a ballot for said poll, said signature being specific to the members of the list of 
voters; 

generating an anonymous signature specific to the members of the list of 
voters, this signature being built so as to contain a proof that the member of the list 
of voters having issued the signature, has a certificate of membership of the list of 
voters, and a signature element which is common to all the signatures issued by a 
same member of the list of voters with a same serial number and which contains 
proof that the serial number was used for generating the signature; 

verifying a signature issued by a member of said list of voters by applying a 
predefined algorithm in order to show proof that the signature was issued by a 
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person having a certificate of membership of the list of voters, and by verifying using 
said signature element that the serial number was used for generating the signature; 
and 

receiving a new certificate of membership of the list of voters each time the 
composition of the list of voters is changed. 
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